← Database

CVE-2021-43673

MEDIUM CVSS: 6.1 Published: 2021-12-03 Modified: 2026-06-17

Description

dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of the exit function is printed for the user via exit(json_encode($return)).

Affected Platforms

Dzzoffice Dzzoffice

Weakness Type

CWE-79

References